Supply Chain Incidents

MAL-2026-12432

Malicious code in runtime-sentinel (npm)

MAL-2026-12369

Malicious code in elephant-array-utils (npm)

MAL-2026-12362

Malicious code in digital-interview-digital-interview-core (npm)

MAL-2026-12479

Malicious code in time-linters-webapp-eslint-config (npm)

MAL-2026-12350

Malicious code in chart-data-utils (npm)

MAL-2026-12443

Malicious code in statist-browser-typed-client-automlplatform.nlppl.searchy (npm)

MAL-2026-12423

Malicious code in react-fontawesome-icons (npm)

MAL-2026-12342

Malicious code in boxy-fixture-allure (npm)

MAL-2026-12467

Malicious code in streak-int-lib (npm)

MAL-2026-12421

Malicious code in pvm-autodoc (npm)

MAL-2026-12455

Malicious code in statist-browser-typed-client-twork.tsales.nitro.metrics (npm)

MAL-2026-12470

Malicious code in streak-metricsa (npm)

MAL-2026-12383

Malicious code in foodi (npm)

MAL-2026-12475

Malicious code in tcb-web-copy-to-clipboard (npm)

MAL-2026-12502

Malicious code in gcli-control (PyPI)

MAL-2026-12462

Malicious code in streak-day-engine (npm)

MAL-2026-12454

Malicious code in statist-browser-typed-client-social.shorts.editor (npm)

MAL-2026-12413

Malicious code in pfp-forms-mobile-sme-group-tiles (npm)

MAL-2026-12314

Malicious code in @copilot-mcp/apex (npm)

MAL-2026-12333

Malicious code in @zahlen/checkout-react (npm)

MAL-2026-12453

Malicious code in statist-browser-typed-client-sme.rko.finance.web (npm)

MAL-2026-12445

Malicious code in statist-browser-typed-client-eventea.projects.pfpacquiring (npm)

MAL-2026-12466

Malicious code in streak-daykit (npm)

MAL-2026-12418

Malicious code in postcss-animate-css-vars (npm)